Unity University
Department of Computer Science
Dessie Campus
File Sharing and Security
Sharing
Sharing allows an object to be accessed from network. By default in windows 2003 server there
are some hidden shares, these shares end with a $ symbol. To view these default shares open
computer management (right click on my computer and choose manage) and select shared
folders and then shares.
These default shares can be accessed only by administrators by using a UNC (Universal naming
convention) path (ex:\\server\sharename)
To access a default C drive share you have to type
\\servername\C$
To share an object
1) Right click on the object (only folder or drive), and choose sharing and security
2) Select share this object and type the share name and press ok.
3) The sharename should be within 8 characters and should not contain any space or special
characters.
4) By default all shares are in read only mode, you can press the permissions button to provide
change permission or full control.
Security
Windows 2003 Server allows to provide security to files and folders; this feature is available
because of the NTFS (New Technology File System). Any user can create and provide security
for his files/folder.
When a user creates a file/folder he becomes the owner of that object; because of this he has full
control over that object.
There are different levels of security, such as read, modify, full control etc.
Full control includes 6 permissions they are:
a) Read b) Write c) execute d) delete e) change permissions f) take ownership.
Where as Modify includes 4 permissions that are: a) read b) write c) execute d) delete.
Compiled By: Daniel Mehari Page 1
To set permissions on a folder/file use the following steps
1) Right on the object, choose properties
2) Click on the security tab, and remove all the permissions by pressing the advanced button
and then unchecking the "inherit permissions option".
3) When prompted to remove, press the remove button and then press ok.
4) Press the add button and type the user or the group name and press ok.
5) Select the permissions from the list and press ok to finish.
Taking ownership of an object
Taking ownership is a special permission which allows an administrator to transfer the owner
ship of an object to himself. This permission is used, only if a particular object is inaccessible for
an administrator.
To take ownership, use the following steps
1) Right click on the object and choose properties.
2) Click on the security tab and press the advanced button.
3) Click on the Owner tab and select administrator from the list provided
4) Check "Replace owner on subdirectories and files" and press ok.
5) Press yes to take owner ship of all subdirectories and files present.
File Auditing
Auditing refers to recording security events. Security events are triggered when a user accesses,
modifies or deletes an object.
The event viewer tool records these events. To setup auditing on secure folder, use the following
steps.
1) Right click on the folder or file and choose properties.
Note:- Auditing can be setup only by an administrator and you have to log in as an
administrator to perform these steps.
2) Click on security tab and press the advanced button
3) click on auditing and press add and choose everyone press ok.
Compiled By: Daniel Mehari Page 2
4) From the list select the events to be recorded, (ex:- delete, delete sub folders and files etc).
Check both success and failure options. press ok.
5) Open either local security policy or domain security policy and then double click on local policy
and then double click on audit policy.
6) Double click on audit object access and select "success" and "failure" check boxes. press ok
7) Type gpupdate to refresh the policy settings.
8) To view the recorded events, as an administrator open “event viewer” from administrative tools.
9) Click on "security" and double click on any event to view the detailed record.
Installing & Configuring Print Server
Installing Printer on the Server
1) Log in as administrator and open printers and faxes from start -> settings
2) Make sure the printer is connected to the server and it is turned on.
3) Double click on add printer and press next.
4) Choose "Local printer" and check "Automatically detect my plug and play printer" -> next
5) Choose "yes" or "no" to print a test page and press finish.
6) To share the printer right click on it and choose sharing type a sharename and press ok.
ex:- epson
Client Configuration
1) In the client log in as any domain user and open printer and faxes from control panel
2) Double click on add printer press next.
3) Choose "network printer" -> next.
4) Select "Connect to this printer" and type the UNC path.
Ex:- \\server3\epson
5) Press next and finish to complete the setup.
Compiled By: Daniel Mehari Page 3
